<p>Instead of using a directly connected snartcard, the app could use a token based system like rsa keyfobs. That would satisfy the two factor authentication requirement and would work with any hardware including phones.</p>